Web Wiz Site News realease v3.06 administration access.

["drG4njubas" <drG4nj () mail ru>]

Date:
14.04.2003

Subject:
Web Wiz Site News realease v3.06 administration access.

Description:
Free asp news management system. Includes, simple intergration, 
short news item with link to full story, insert images, links, 
text formatting, user comments(optional) with email notification, 
anti-spam settings, and more 

Vendor:
Web Wiz Guide
http://www.webwizguide.info/

Vulnerability:
Administrator's password is not encrypted. It is
placed in MS Acess database. An attaker may download 
it and gain administrators privilegies.
Example: http://www.target.com/news/news.mdb


Black Tigerz Research Group
We are:Areus,Barracuda,n1Tr0f4n,Velzevol,n3ch,drG4njubas.
Please visit our website: http://www.blacktigerz.org